Windows 10: Cannot Export / Backup my EFS certificate private key

Windows 10 Pro
1909


Hi Folks,

I am trying to export my EFS certificate as a backup, however I am having no joy.

Note: I can encrypt and decrypt files using EFS no problem using my account.


Trying in Certificate Manger:

certmgr.exe As Administrator
Personal / Certificates
Right click the EFS cert / Export


The option to export the private key is greedy out, with a note:

The associated private key is marked as not exportable. Only the certificate can be exported



Using cipher.exe:

cipher /x c:\temp\EFSCertBack


Error: Key not valid for use in specified state.




Before I decrypt all of my EFS files and start a fresh any ideas?



Cheers

:)

 

EFS Backup keys

Thanks BullDogXX

I performed a full encrypted backup just in case but there was no problem. Now I need to know if the previous backup EFS certificate is still good. I was going to back them up again under Windows 10 but when I follow the recommended procedure...

(http://windows.microsoft.com/en-ca/windows/back-up-efs-certificate#1TC=windows-7)

and try to expert the private key, the option is greyed out out and the message says the private key is marked as non exportable.

 

how do I export certificates and/or private keys?

Hi,

Thank you for posting your query on Microsoft Community. Let me assist you.

I suggest you to follow the below steps to export a certificate with a private key

1. Open the Certificates console for the user, computer, or service you want to manage.

2. In the console pane, select the certificate store and container holding the certificate that you want to export.

3. In the details pane, click the certificate you want to export.

4. On the Action menu, point to
All Tasks, and then click Export.

5. In the Certificate Export Wizard, click
Yes, export the private key. (This option will appear only if the private key is marked as exportable and you have access to the private key.)

6. Under Export File Format, do one or all of the following, and then click
Next.

• To include all certificates in the certification path, select the
  Include all certificates in the certification path if possible check box.
• To enable strong protection, select the Enable strong protection (requires IE 5.0, NT 4.0 SP4 or above) check box.
• To delete the private key if the export is successful, select the
  Delete the private key if the export is successful check box.

7.In Password, type a password to encrypt the private key you are exporting. In
Confirm password, type the same password again, and then click
Next.

8. In File name, type a file name and path for the PKCS #12 file that will store the exported certificate and private key, click
Next, and then click Finish.

Hope this information is helpful. Please do let us know if you need further assistance, we’ll be glad to assist you.

 

How find Private key of EFS?

Hi VijayKumhar,

Thank you for posting your question in the Microsoft Community Forums.

I appreciate your efforts to work on this issue.

Follow these steps to back up the private key using the Command Prompt as the option ‘export the private key’ is not available.

1. Open CMD or Command Prompt in Admin mode.
   
2. Type ‘cipher /x "%UserProfile%\Desktop\EFSCertificates".
   
3. You will now get a prompt confirming if you are sure if you want to back up the certificates associated to your files encrypted with EFS Encryption. Click on OK.
   
4. It will work as you to enter a password to protect your .PRX file from unauthorized users. Enter the password and hit Enter.
   
5. Now, enter the same password to confirm it and then hit Enter.
   

Once this is done, a file by name ‘EFSCertificates.PRX’ will be saved on to your Desktop.

Further, if you still face issues, suggest you to post your question in the
TechNet Windows 10 IT Pro Security where we have support professionals who are
well equipped with the knowledge and skill to handle queries regarding EFS Certificates issue.

We look forward for your response.

Regards,

Srimadhwa B

Microsoft Community-Moderator